STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must require users to reauthenticate for privilege escalation.

DISA Rule

SV-271724r1091884_rule

Vulnerability Number

V-271724

Group Title

SRG-OS-000327-GPOS-00127

Rule Version

OL09-00-002362

Severity

CAT II

CCI(s)

• CCI-002234 - Log the execution of privileged functions.

Weight

10

Fix Recommendation

Configure OL 9 to not allow users to execute privileged actions without authenticating.

Remove any occurrence of "!authenticate" found in "/etc/sudoers" file or files in the "/etc/sudoers.d" directory.

$ sudo sed -i '/\!authenticate/ s/^/# /g' /etc/sudoers /etc/sudoers.d/*

Check Contents

Verify that OL 9 requires users to reauthenticate for privilege escalation.

Verify that "/etc/sudoers" has no occurrences of "!authenticate" with the following command:

$ sudo grep -ri '!authenticate' /etc/sudoers /etc/sudoers.d/*

If any occurrences of "!authenticate" are returned, this is a finding.

Vulnerability Number

V-271724

Documentable

False

Rule Version

OL09-00-002362

Severity Override Guidance

Verify that OL 9 requires users to reauthenticate for privilege escalation.

Verify that "/etc/sudoers" has no occurrences of "!authenticate" with the following command:

$ sudo grep -ri '!authenticate' /etc/sudoers /etc/sudoers.d/*

If any occurrences of "!authenticate" are returned, this is a finding.

Check Content Reference

M

Target Key

5680